{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"hellosign","name":"HelloSign","domain":"hellosign.com","category":"E-signature","one_liner":"eSignature software for small and mid-market businesses.","trust_center_url":null,"security_page_url":null,"url":"https://certreports.com/vendors/hellosign/security","last_verified_at":"2026-11-02T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"expired","state_label":"Expired","sentence":"Certificate expiry unknown date passed; no renewal found as of 2 Nov 2026.","kind":"listing","status_text":"Inactive","issued_at":"2018-01-31","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-11-02","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/hellosign/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/3720","fetched_at":"2026-11-02 05:01:31.056767+00","content_hash":"d6c7a4d823659c16c952760c5d67a324205cb7340db2ac5c7c5d9637880f9dac","wayback_url":null,"quote":"HelloSign: Inactive","confidence":1}]}],"brief":{"summary":"HelloSign's EU-US Data Privacy Framework registry listing is marked inactive, as of 17 Sep 2026. The EU-US Data Privacy Framework record shows an original issue date of 31 Jan 2018, as of 17 Sep 2026. No expiry date is recorded alongside HelloSign's inactive EU-US Data Privacy Framework listing, as of 17 Sep 2026. As of 17 Sep 2026, the only evidence on record for HelloSign is this inactive EU-US Data Privacy Framework listing dated from 31 Jan 2018. No public evidence was found for SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, or GDPR for HelloSign, as of 17 Sep 2026.","bullets":["EU-US DPF: registry listing inactive (as of 17 Sep 2026); originally issued 31 Jan 2018","No expiry date recorded for the inactive DPF listing","No public evidence found for SOC 2, ISO/IEC 27001, PCI DSS, HIPAA, or GDPR"],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 12:12:54.057942+00"},"legal_docs":[],"documents":[],"statements":[],"security_profile":null,"regulations_url":"https://certreports.com/api/v1/vendors/hellosign/regulations/{regulation}","subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-11-02T19:19:15.496Z"}